The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is d

Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2.

Cross-Site Request Forgery (CSRF) vulnerability in XWP Stream plugin <= 3.9.2 versions.

The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using i

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Applicatio

The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dash